This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json) Hash identifier: emTQx+isV/paKH45Xbs37W4wKYTf9msxSXLQ5TdcjSU= Subject key identifier: 6A:60:E0:6C:85:1C:DD:66:1F:BF:A7:2A:48:64:61:A4:12:FF:AF:4F Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7 Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7 Certificate serial: 019AF19AF85A47BB4BC17015087F73A16026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft Manifest number: 8C Signing time: Sat 06 Dec 2025 03:00:56 +0000 Manifest this update: Sat 06 Dec 2025 03:00:56 +0000 Manifest next update: Sun 07 Dec 2025 03:00:56 +0000 Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: QPKgsYpCfQdLLUHiMdewEa+4TxdFJRYf6tO06tC8Bj0=) 2: b771fZdz_MNhiObaQsIwRdjf7Gs.roa (hash: o+D5q+mMR9tPd7YAvMxT+oCI4+Bj3WK3M/NrPMAIyl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f8:5a:47:bb:4b:c1:70:15:08:7f:73:a1:60:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7 Validity Not Before: Dec 6 03:00:56 2025 GMT Not After : Dec 7 03:00:56 2025 GMT Subject: CN=6a60e06c851cdd661fbfa72a486461a412ffaf4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:67:3f:b8:87:19:7d:62:52:21:e9:00:8c: 4d:9f:d4:74:c5:32:db:d8:fb:7c:f6:56:01:15:f3: f5:14:cf:b7:b5:aa:52:ba:3c:69:1f:f3:3f:5a:8d: 2d:bf:7c:7a:12:88:6d:6d:c7:1b:d8:fe:f4:6f:66: 97:86:82:48:08:f7:9b:15:4d:c7:00:8a:cc:49:ca: 6e:ad:f1:09:d7:7f:b4:1c:d5:f1:dd:0c:ad:cd:7f: 6c:da:7e:cc:25:11:2e:34:b2:b1:58:e8:43:3c:21: 66:c8:0a:f9:82:6e:bc:df:51:a1:bc:c9:e5:73:b1: 26:e7:f6:6f:43:0b:9b:a3:ba:b4:13:89:bc:04:02: 23:b3:1f:89:f2:f8:68:25:72:27:7a:01:37:57:45: 62:19:d5:59:79:7e:df:60:ab:18:bb:7f:53:bd:85: d7:86:fe:25:6e:21:e0:b5:43:ee:c1:9f:e0:74:e8: ae:98:e4:bf:82:5a:78:eb:af:fe:28:0f:2b:00:58: 44:bd:6e:85:32:f9:6a:e9:52:43:d8:ea:0a:e3:99: b6:f2:9e:3d:8e:67:a4:a4:08:5e:66:cb:65:a7:0f: 0a:3c:6f:9a:50:56:c4:b9:3c:63:45:41:e5:11:9e: ed:be:31:9d:47:b5:33:56:f1:f6:d8:e9:59:06:20: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:60:E0:6C:85:1C:DD:66:1F:BF:A7:2A:48:64:61:A4:12:FF:AF:4F X509v3 Authority Key Identifier: keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:d7:ec:56:31:73:cf:43:fe:5f:bd:21:1e:0b:80:b0:32:d5: 37:d8:bb:5d:e2:4f:28:cb:37:c0:63:2a:27:ac:ae:7c:07:ef: e7:e4:00:5c:04:65:ad:d8:a0:98:54:90:48:91:70:e5:44:77: 5d:57:43:38:df:a3:9b:28:2e:39:6c:88:48:67:c6:54:e6:41: 29:f8:f4:6d:f2:f3:3e:42:1f:1a:a6:8c:fb:55:b9:75:49:b9: ef:28:5c:57:99:96:d0:81:8b:0f:e6:48:e6:f1:0f:4e:0c:fe: b1:0c:22:95:80:f8:1e:d3:11:b7:76:a4:0a:30:1c:74:d3:38: 54:e7:08:99:0f:28:7d:53:2c:72:b4:62:4c:3e:eb:cc:b5:49: b9:a3:fb:70:66:94:e1:84:25:39:e3:ea:c3:64:22:57:fa:81: c8:0a:61:f3:42:4e:7a:47:dd:4c:d0:49:c6:8b:b4:23:57:31: 22:d8:c1:02:47:06:5b:2d:c7:a9:22:fa:94:e5:74:5a:50:5f: 62:38:3c:93:8f:5c:28:8b:ec:31:c8:3f:34:bd:4e:bf:20:bf: 69:7f:ff:fc:86:52:ea:29:68:e7:72:68:09:e2:16:ba:92:2d: 60:a2:fb:b4:70:9e:93:d6:53:03:f2:19:c5:e3:4e:e8:eb:25: 36:6a:f6:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvhaR7tLwXAVCH9zoWAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOGY0MGIxMjQ4ZGUzZGE1ZjVkNjA5N2Y4MTA2ODI5M2M0 YmVlZjcwHhcNMjUxMjA2MDMwMDU2WhcNMjUxMjA3MDMwMDU2WjAzMTEwLwYDVQQD Eyg2YTYwZTA2Yzg1MWNkZDY2MWZiZmE3MmE0ODY0NjFhNDEyZmZhZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUlnP7iHGX1iUiHpAIxNn9R0xTLb 2Pt89lYBFfP1FM+3tapSujxpH/M/Wo0tv3x6Eohtbccb2P70b2aXhoJICPebFU3H AIrMScpurfEJ13+0HNXx3QytzX9s2n7MJREuNLKxWOhDPCFmyAr5gm6831GhvMnl c7Em5/ZvQwubo7q0E4m8BAIjsx+J8vhoJXInegE3V0ViGdVZeX7fYKsYu39TvYXX hv4lbiHgtUPuwZ/gdOiumOS/glp466/+KA8rAFhEvW6FMvlq6VJD2OoK45m28p49 jmekpAheZstlpw8KPG+aUFbEuTxjRUHlEZ7tvjGdR7UzVvH22OlZBiC66QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpg4GyFHN1mH7+nKkhkYaQS/69PMB8GA1UdIwQY MBaAFF2PQLEkjePaX11gl/gQaCk8S+73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEt YmQ2NWZlZDY3ZGM2LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEtYmQ2NWZlZDY3ZGM2 LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNfsVjFz z0P+X70hHguAsDLVN9i7XeJPKMs3wGMqJ6yufAfv5+QAXARlrdigmFSQSJFw5UR3 XVdDON+jmyguOWyISGfGVOZBKfj0bfLzPkIfGqaM+1W5dUm57yhcV5mW0IGLD+ZI 5vEPTgz+sQwilYD4HtMRt3akCjAcdNM4VOcImQ8ofVMscrRiTD7rzLVJuaP7cGaU 4YQlOePqw2QiV/qByAph80JOekfdTNBJxou0I1cxItjBAkcGWy3HqSL6lOV0WlBf Yjg8k49cKIvsMcg/NL1OvyC/aX///IZS6ilo53JoCeIWupItYKL7tHCek9ZTA/IZ xeNO6OslNmr2Nw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:49 2025 by rpki-client